Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CVXuT_Ub1rMmCIx7MwN7BYSUeiw.roa
File: CVXuT_Ub1rMmCIx7MwN7BYSUeiw.roa (raw, json)
Hash identifier: KtShdVb6zXQHkys/ygq5m/vpeftMZiS1X6oW63ESRmI=
Subject key identifier: 09:55:EE:4F:F5:1B:D6:B3:26:08:8C:7B:33:03:7B:05:84:94:7A:2C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7E22284B5BC49777B39BDB5856D358EF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CVXuT_Ub1rMmCIx7MwN7BYSUeiw.roa
Signing time: Mon 30 Oct 2023 01:10:49 +0000
ROA not before: Mon 30 Oct 2023 01:10:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:7e1c:6850/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7e:22:28:4b:5b:c4:97:77:b3:9b:db:58:56:d3:58:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 30 01:10:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0955ee4ff51bd6b326088c7b33037b0584947a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:62:8f:57:96:76:cc:32:78:a2:8c:33:38:
50:ce:d7:7e:64:b3:01:bb:ed:20:72:e1:11:1f:c8:
d6:f9:ca:e9:fc:f5:2b:fb:19:f2:e7:8e:22:97:ef:
e4:67:4e:16:99:65:1b:87:d2:0e:d0:b8:72:5f:31:
94:dd:2a:fa:40:21:56:ac:a0:66:07:27:fd:18:da:
a2:68:80:f2:7f:a1:44:94:c5:ea:8c:aa:2a:25:ee:
2e:22:b7:fe:1e:1d:df:1e:cc:ed:ed:43:32:bd:74:
bf:92:fc:3f:40:1f:c7:c4:a6:05:36:6d:6d:28:ce:
58:17:84:8a:9b:6d:e6:3a:18:aa:eb:0c:b3:b0:c3:
d4:4f:a1:73:42:84:82:08:20:a7:98:bb:14:2c:5e:
00:bb:91:bc:7d:e2:64:02:b4:d1:4b:62:b0:c9:9d:
e0:57:dd:17:65:04:50:81:c9:e3:7e:e7:7b:4d:39:
f0:5f:cb:f7:61:d8:8f:64:3c:01:8a:19:2f:1a:65:
ee:b1:ae:48:74:b9:ce:d5:6e:aa:4c:4c:1f:94:f1:
7c:e5:a2:95:26:97:b5:33:cb:c4:5f:19:3a:ec:6d:
7b:21:f5:55:8b:df:9a:6e:3a:e5:f0:4c:ad:b6:6e:
04:42:cd:6c:07:ab:ab:ab:0b:d5:21:b7:bb:a0:62:
2a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:55:EE:4F:F5:1B:D6:B3:26:08:8C:7B:33:03:7B:05:84:94:7A:2C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CVXuT_Ub1rMmCIx7MwN7BYSUeiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:0c:f0:c5:a6:99:83:5c:65:c6:10:11:d4:b2:cb:14:fd:6d:
4e:18:a5:35:68:5b:25:dd:cc:56:94:f4:7e:3c:25:3d:75:b3:
9e:42:34:04:8b:10:eb:b3:94:a3:9b:2e:f5:aa:c2:00:a5:1e:
f9:e4:52:d6:db:46:a2:01:db:ea:62:8e:ac:03:c3:cf:1f:50:
a3:a8:6e:3e:3b:86:fb:82:5e:68:3f:83:68:7d:d5:de:c5:43:
e3:75:c9:ce:90:da:0b:14:d0:85:49:db:e8:13:c6:c1:79:8b:
ba:1a:7a:27:e4:9d:ec:3c:94:05:c3:9a:e6:b3:a3:6c:d3:c7:
b4:4d:0a:a5:44:21:37:a3:dc:82:4e:68:48:5f:fd:80:4f:e5:
f2:ab:6d:d4:7c:f1:13:1b:10:af:47:d7:12:9a:c8:48:bb:6d:
b6:e2:22:fc:2a:d7:6f:0f:79:4a:69:81:18:80:49:ae:05:9b:
bc:9e:a8:60:87:fd:a4:c0:9c:07:62:a1:96:21:6e:29:41:7a:
6d:68:fe:85:65:57:96:48:c3:88:8d:8b:69:09:62:5f:57:a8:
95:c2:11:97:b8:a0:6d:9d:3e:01:3c:7f:6c:54:77:b6:43:a2:
ce:de:12:9a:6a:a4:de:c4:a1:a6:06:53:87:b0:32:6b:0e:1d:
a3:b7:4c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:32:37 2025 by rpki-client